Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
File:                     8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft (raw, json)
Hash identifier:          e4N/8j4cZSQruyUXZINLZkKwtfBiYo6YSeoKLz1lJUY=
Subject key identifier:   71:B9:A7:18:0B:BD:0D:42:F7:8F:7B:6A:D2:56:1D:A3:E1:B0:7E:CC
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Certificate issuer:       /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial:       019DA340EDC0FC3826A32A85F1F211F9B793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
Manifest number:          18CA
Signing time:             Sun 19 Apr 2026 01:00:34 +0000
Manifest this update:     Sun 19 Apr 2026 01:00:34 +0000
Manifest next update:     Mon 20 Apr 2026 01:00:34 +0000
Files and hashes:         1: 8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl (hash: 3UiV/uYAUjRfeaZugIuCGGFcLmoB4bHutvkIKS707m8=)
                          2: G7HS4Pe64aq7LX7Ac6sahYxcvsg.roa (hash: CRoiGyn3+g1TcYhralq7D2YpvKZFCAsmyg1ItQBPBYo=)
                          3: d79pVbNl6KV7mE-TmGcgiFhhpy0.roa (hash: 6sQKNK+i7JugUTkWCMHqg5UJuTLwVJ2b0IOTbHFw/EY=)
                          4: uGF8_MSgyhQ8dAHm23AhHh6NWz0.roa (hash: sxZlIQb25hDFz3ykb8U9qXE3lTMI/4iHplhe6RLTs2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 01:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:40:ed:c0:fc:38:26:a3:2a:85:f1:f2:11:f9:b7:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
        Validity
            Not Before: Apr 19 01:00:34 2026 GMT
            Not After : Apr 20 01:00:34 2026 GMT
        Subject: CN=71b9a7180bbd0d42f78f7b6ad2561da3e1b07ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a5:ce:ce:c6:b7:ee:fb:cd:25:22:72:53:d4:
                    cf:fc:10:24:30:6c:dd:33:c5:3d:62:94:94:c3:59:
                    29:9e:08:54:d5:c9:b9:b4:bc:d2:8d:3c:b2:18:7c:
                    47:3c:30:17:2b:c2:c2:a8:fd:fe:eb:95:28:64:18:
                    ec:92:c3:63:64:59:af:8b:1a:72:15:e3:59:ea:df:
                    09:ab:6e:10:bc:13:72:5f:67:f5:75:ed:0c:23:98:
                    b6:0c:dc:ac:35:83:9f:a9:ab:d4:c3:fd:72:a8:f9:
                    54:e7:ce:52:33:9d:94:a1:96:d2:64:9a:fd:ad:e0:
                    ee:a7:50:53:ef:cf:36:6f:58:31:ab:ee:95:04:1f:
                    47:ad:7f:7a:ef:4f:82:a1:71:be:70:71:5b:6c:67:
                    35:0f:ed:2a:e5:39:3b:95:fa:a8:b0:61:45:f2:1e:
                    f5:0a:af:1e:1d:de:58:da:e9:41:7f:5c:ab:58:65:
                    08:81:e7:df:23:44:82:28:74:e1:80:ec:92:68:3a:
                    30:3f:3d:97:92:95:ff:5e:d1:15:4d:3f:c5:5f:1e:
                    cb:83:82:84:39:20:1b:41:a1:e5:d7:44:5d:5f:ec:
                    8b:a3:c9:79:0a:5c:27:ee:1e:11:f6:fa:ed:02:a1:
                    0f:05:72:21:90:88:4c:82:9b:8c:f7:2e:38:32:64:
                    cf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B9:A7:18:0B:BD:0D:42:F7:8F:7B:6A:D2:56:1D:A3:E1:B0:7E:CC
            X509v3 Authority Key Identifier:
                keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:6a:d2:34:75:4c:5b:9b:58:d5:80:bf:85:49:3c:6d:7d:cb:
         f8:e1:ca:70:42:16:ab:48:08:7b:6e:f4:b9:cd:27:0b:d8:89:
         38:d0:49:fb:e5:49:f0:f4:19:e6:48:ba:fc:88:7f:6a:de:e3:
         29:aa:5a:12:c3:25:d1:ad:2a:36:05:a8:8a:82:65:25:e7:6c:
         62:b7:d6:6d:6c:df:40:7b:e3:e8:26:c7:fa:aa:d0:b1:17:f7:
         05:a0:19:15:77:d9:57:90:42:68:d8:1b:c6:6e:ab:b1:32:30:
         8e:0b:ac:5e:1f:c1:5a:71:ad:6e:e2:3f:f5:1e:c8:1b:6a:07:
         5e:49:d8:96:a1:c9:e2:21:6c:07:6e:b4:d7:5e:e9:e1:8d:54:
         dc:3b:3d:c3:50:6f:4b:b9:1e:44:3d:8d:73:50:80:e3:f9:fb:
         a7:46:df:94:71:0f:aa:65:63:ae:8c:af:bf:ad:7a:15:cb:c9:
         40:94:31:40:4c:2d:44:dd:85:72:4f:34:55:6c:10:5b:46:d3:
         49:8b:f2:ff:73:5b:84:d1:16:fe:0c:89:1c:65:5e:16:0b:6d:
         2c:d5:8b:84:40:10:ab:09:9d:65:ac:05:74:01:13:32:b6:52:
         6e:ed:1d:f6:c3:f0:2b:9c:c3:16:90:f7:79:d1:56:a9:68:97:
         d8:14:c4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:38 2026 by rpki-client